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Abstract 

One of the most important quantum algorithms ever discovered is Grover's algorithm for searching 
an unordered set. We give a new lower bound in the query model which proves that Grover's algorithm 
is exactly optimal. Similar to existing methods for proving lower bounds, we bound the amount of 
information we can gain from a single oracle query, but we bound this information in terms of angles. 
This allows our proof to be simple, self-contained, based on only elementary mathematics, capturing our 
intuition, while obtaining at the same an exact bound. 
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1 Introduction 

Grover's algorithm [13 is one of the most celebrated quantum algorithms ever devised. The algorithm and 
its many extensions demonstrate that quantum computers can speed up many search-related problems by a 
quadratic factor over classical computers. The algorithm is based on some of the most fundamental prop- 
erties of quantum mechanics and has consequently found uses in a very wide range of situations, including 
unordered searching [T3] [9j , communication complexity [11] , counting [10] , cryptography [2] , learning the- 
ory [19], network flows [5], zero-knowledge [20], and random walks [18] . just to name a few. The underlying 
principles of the algorithm are very versatile and are readily amendable to a number of variations in applica- 
tions. By clever insight into its basic principles, it has been adapted to for instance local searching of spatial 
structures [T] , searching erroneous data [TS] , and searching structures with variable search costs [I] . Grover's 
algorithm and its generalizations are in conclusion one of the most successful frameworks ever discovered for 
quantum information processing. 

Given these overwhelmingly many positive applications of Grover's search algorithm, it is natural to ask if 
Grover's algorithm is optimal, or if an even faster routine could take its place in the above applications. 
The unanimous answer is that no better algorithm exists for searching unordered structures on a quantum 
computer. Grover's algorithm is in other words optimal. The optimality of the algorithm has been established 
through many different approaches, including adversarial arguments [3], degree of polynomials [7], hybrid 
arguments 18 , Kolmogorov complexity [17] , and spectral decompositions [6] . 

Common for all the above lower bounds is, however, that they do not show that Grover's algorithm is 
exactly optimal, but only asymptotically optimal. The above lower bound results on quantum searching 
do not exclude the possibility that there might be another quantum algorithm that solves Grover's search 
problem say 10% faster than Grover's own algorithm. 

Fortunately we do know that Grover's algorithm is exactly optimal through the singular work of Zalka [2"T] , 
By carefully inspecting each step in Grover's algorithm, Zalka is able to argue that it is exactly optimal. 
Zalka's proof involves defining a certain function g and proving it has some appropriate behaviour, including 
g' > and g" < 0, using Lagrange multiplies to solve constrained extremum problems, and eventually 

"This work has been supported by Canada's NSERC, the Canadian Institute for Advanced Research (CIFAR), and MITACS. 
t Department of Computer Science, University of Calgary, 2500 University Drive N.W., Calgary, Alberta, Canada T2N 1N4. 
Email: {dcatalin,hoyer}@ucalgary . ca. 



1 



concluding that four different inequalities are saturated by Grover's algorithm. Zalka's construction seems 
to require an intimate understanding of Grover's algorithm and fluency in finding extrema for various multi- 
variate functions. 

Grover and Radhakrishnan [T3] make several simplifications to Zalka's proof and construct a more explicit and 
rigorous proof that allows them to give a near-tight lower bound for Grover's problem. Their near-optimal 
theorem applies without modifications to success probabilities of at least 0.9, whereas Zalka's original proof 
applies to any choice of success probability and any size of search space. 

The aim of the present paper is to give a new tight lower bound for the unordered search problem that is 
as simple and transparent as possible, using only elementary mathematics, and that does not presume any 
knowledge of Grover's algorithm or any other upper bound. Our proof applies, as Zalka's, to any choice of 
success probability and any size of search space. 

2 Proving lower bounds for quantum algorithms 

In the unordered search problem, we are given a bitstring x as input. The input is given to us as an oracle 
so that the only knowledge we can gain about the input is in asking queries to the oracle. We are interested 
in solving the unordered search problem with the least number of queries to the oracle. We model the oracle 



Definition 1 (Unordered search problem) We are given a bitstring x £ {0, 1} N as an oracle, and 
promised that there exists a unique index 1 < i < N for which jc,- = 1. We want to output an index 
1 < j < N such that i — j with probability at least p. 

In the following, we identify the N possible inputs with the set y € {1,2, ... , N} so that for instance input 
y = 7 denotes the input bitstring x in which bit 7 is I (xj — I) and the N~ 1 other bits are (xi — for i ^ 7). 

The most straightforward classical deterministic algorithm for solving the unordered search problem would 
be to simply query the oracle for the N — 1 bits x%, x%, . . . , £jv-i- If any of these N — 1 bits equals I, we 
output the corresponding index, and otherwise, we output the unqueried index N. This algorithm always 
outputs the correct answer, uses N — 1 queries, and is optimal. An optimal probabilistic algorithm is to pick 
a set of T = \pN — I] distinct indices uniformly at random, and query the oracle on those T indices. If any 
of the T bits equals 1, we output the corresponding index, and otherwise, we output one of the remaining 
N — T indices, picked again uniformly at random. The probability we output the correct index is — j&i > p. 
Grover's algorithm is the best known quantum algorithm for the unordered search problem. It uses of order 



y/pN queries and outputs the correct index with probability at least p. 



Any quantum algorithm in the oracle model starts in a state that is independent of the oracle x. For 
convenience, we take the start state to be |0) in which all qubits are initialized to 0. It then evolves by 
applying arbitrary unitary operators U to the system, alternated by queries O x to the oracle x, followed 
by a conclusive measurement of the final state, the outcome of which is the result of the computation. We 
assume (without loss of generality) that the final measurement is a von Neumann measurement represented 
by a finite set of orthogonal projectors {rij,} that sum to the identity. In symbols, a quantum algorithm A 
that uses T queries to the oracle, computes the final state 



which is then measured, yielding the answer y with probability ||n !/ |4 , ^')|| . 

A more detailed and excellent introduction to the query model is given in [12] . and a discussion of lower 
bounds for the model in [TO] , 





|C) = UtO^Ut-i-'-UiO^UoIO) 



2 



3 Exact lower bound for quantum searching 



In the unordered search problem, we arc given one of N possible inputs x, and we produce one of TV 
possible outputs ye {1,2,..., N}. For the algorithm to succeed with probability at least p, we require that 
||n a: |'I'^)|| 2 > p for all x € {1,2, . . . ,N}. Let = U t O u U t _i • • • UiO u U |0) denote the state after t queries 
when the oracle u = 00 • • • is the all-zero bitstring, in which case, the oracle O u acts as the identity. Let 
\l/y' T = UtO u ■ ■ ■ O u Ui + iO u UiO y • • • UiO y Uo|0) denote the final state after T queries, where we use oracle y 
for the first i oracle queries and the identity for the latter T — i oracle queries. 

We now give our new exactly optimal lower bound for the unordered search problem. We present our proof 
in parallel with the standard (asymptotically optimal) hybrid argument lower bound derived from 8 which 
seems to be the simplest of the existing lower bounds. Both proofs require three steps, and we present each 
of these steps in a form so that the two proofs resemble each other as closely as possible and are as simple 
as possible. 

The key to our new lower bound is the use of angles as opposed to distances as in the standard proof in [5] . 
We define the quantum angle between two non-zero vectors as 

This seems to be the most appropriate definition of angles for quantum computing and can be readily 
generalized to mixed states through fidelity and satisfies, in particular, the triangle inequality. 



3.1 First step 

The first step in the proof is to establish a Cauchy-Schwarz-like inequality (for each of our two measures, 
distances and angles) which will allow us to bound the amount of information we can learn by each individual 
query. 

Lemma 2 (Cauchy Schwarz — distance version) 

" ~ (2) 



{N N ~j 

ai | < a l and ^ af < 1 > = \/iV. 



Proof First note that when all a^s are equal, the maximum value of the sum is \J N . Now, assume that 
y/~N is not the maximum value of the sum. Then there exist iV numbers &i, . . . , 6jv for which the maximum 
is attained. At least two of the b^s are not equal, denote them by x and y. Replacing both x and y with 
their average, the sum we want to maximize remains unchanged, while the sum of squares strictly decreases 
since 

/ , \ 2 , 

„2 i 2 o I V \ _ 1 C™ „,\2 



^+^-2(^j =-( x -yy>o. 

We can thus increase all b^s by a tiny amount while keeping the sum of squares at most 1, contradicting 
the assumption that the b^s attain the maximum. It follows the maximum is attained when all a^s are 
equal. □ 

Lemma 3 (Cauchy Schwarz — angle version) 

( N N \ 

max j^6>, | < d l < - and ^ sin 2 6 % < 1 j = N arcsin -== . (3) 
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Proof First note that when all a^s are equal, the maximum value of the sum is N arcsin -^=. Now, assume 
that this is not the maximum value of the sum. Then there exist N angles ipi, . . . , tpw for which the maximum 
is attained. At least two of the ip^s are not equal, denote them by u and v. Replacing both u and v with 
their average, the sum we want to maximize remains unchanged, while the sum of squares strictly decreases 
sinceQ 

9 9 ( U + V \ n / It — V\ 

sin u + sin v — 2 sin I — - — J = 2 sin I — - — J cos(w + v) > 0. 

We can thus increase all (p^s by a tiny amount while keeping the sum of squares at most 1, contradicting 
the assumption that the ip.^s attain the maximum. It follows the maximum is attained when all O^s are 
equal. □ 

3.2 Second step 

The second step is then to show that the amount of information we learn by each of the T query can only 
add up linearly (with respect to our two measures, distances and angles). 

Lemma 4 (Increase in distance by T queries) The average distance after T queries is at most 2T^=. 
Proof We have, using the triangle inequality, 

N , N , N T-l 



J_VII* T -* T II = — VII^ T -*°' T || < — V V ll* i+1 ' T -* 4 ' rj 

N Z^W v\\ jyA^W y v II - II y v 

y—l y— 1 y— 1 z— 

T-l N 1 T-l N 

^EEII ***-**!! = ^EEW 4 

i—0 y — l i—0 y—l 
T—l 

2 E -r= = 2T^, 



T-l 

- f^VN VN' 

where the last inequality follows from the inequality proven in Lemma [2] □ 

Lemma 5 (Increase in angle by T queries) The average angle after T queries is at most 2TQ, where 
e = arcsin(^=). 

Proof We have, using the triangle inequality for angles, 

N * N , N T-l 



y=l y=l y=l i=0 

T-l N T-l N 

- jvEE^o.**.**) = ^EE arccos (l cos ( 2 ^)l) 

i—0 y—l i—0 y—l 

l T-l N T-l 

* ^EE 2 ^; < 2 E e - 2T0 > 



i=0 j/=l i=0 

where the last inequality follows from the inequality for angles proven in Lemma [3J □ 



1 The equality can be proven by showing that both sides are equal to cos(u + v) — i cos(2u) — i cos(2i;), or by applying 
Euler's formula. 



4 



3.3 Third step 



The third and final step is then to show that by the end of the algorithm, after all T queries, our measure 
(distance or angle, respectively) is large. 

Lemma 6 (Distinguishability of final states — distance version) Suppose that the algorithm correctly 
outputs y with probability at least p after T queries, given oracle y . Then the average distance is at least 

^DI* T -*^(i + V5-v^-^). (4) 

y=l v v 

Proof The distance after T queries is at least 

||^-^|| > -L(||n tf ^-n v * T || + ||n^ T -nXll) 

> ^(ll n ^ll ~ l|n** T || + ll n ^ T ll - ll n Xll) 

> ^(vP-lln^l + lln^H-Vw) 

where the first inequality follows from the inequality (a — b) 2 > 0, the second-last inequality from the success 
probability being at least p, and the other two from the triangle inequality. The average distance after T 
queries is thus at least 

1 N 1 N n 

^£II* T -*?II * ^E^(i+^-Vw-2||n,*i) 

y=l y=l v 

I f i 2 N \ 

= ^(i + vP-yT^-^EII n ^ T ll) 

y=l 

> -1(1 + ^-^--^), 

where the last inequality follows from the inequality proven in Lemma [5] □ 

Lemma 7 (Distinguishability of final states — angle version) Suppose that the algorithm correctly 
outputs y with probability at least p after T queries, given oracle O y . Then the average angle is at least 

^f>(* T ^)> 0T - ' ( 5 ) 
i/=i 

where sin 2 (0 T ) = p and sin 2 (0) = A. 

Proof The angle difference after T queries is at least 

4* T ,*£) = arccos (|<tf T |^)|) 

= arccos(|(^ T |(n y + n^)|^)|) 

> arccos (||n„* T || • ||rv^|| + ||n^ T || • ||n^||) 

= arccos (sin 0y sin <j)y + cos 0y cos <fE) 
= arccos ( cos(<^ - 0y)) 
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where sin(^) = ||n a W^ || and sin(9y ) = ||n y \E' T ||. The average angle difference after T queries is thus at 
least 

y=l y=l y=l 

where the second-last inequality follows from the success probability being at least p, and the last inequality 
from the inequality for angles proven in Lemma [3j □ 

3.4 Concluding the proof 

Since each of our two measures is initially, is large by the end of the algorithm, and can only increase 
modestly by each query, we can conclude that a large number of queries is required. 

Theorem 8 (Asymptotic lower bound for searching — distance version) The unordered search pro- 
blem with success probability p > requires at least T > ^| ^1 + ^Jp — yT — p — -^^j queries. 

Theorem 9 (Tight lower bound for searching — angle version) The unordered search problem with 
success probability p = sin 2 (0 T ) > requires at least T > e 2 e queries. 

In the case of distances, we conclude that Grover's algorithm is asymptotically optimal, and in the case of 
angles, that Grover's algorithm is exactly optimal. No other algorithm can achieve even a constant additive 
improvement with respect to the number of queries required for a given success probability. Compared to 
other lower bounds, and even to the hybrid argument, our proof seems surprisingly simple. It would be 
interesting to extend our method to obtain both simpler and better lower bounds for other problems, and 
also to find other uses of quantum angles. 
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